diff --git a/etc/sudoers.d/nordvpnd b/etc/sudoers.d/nordvpnd
new file mode 100644
index 00000000..ff1f7471
--- /dev/null
+++ b/etc/sudoers.d/nordvpnd
@@ -0,0 +1,4 @@
+# passwordless sudo systemctl ... for group nordvpn
+%nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.service
+%nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.service
+%nordvpn ALL=NOPASSWD: /bin/systemctl restart nordvpnd.service